Job Description

ECU Health

About ECU Health Medical Center

ECU Health Medical Center, one of four academic medical centers in North Carolina, is the 974-bed flagship hospital for ECU Health and serves as the primary teaching hospital for The Brody School of Medicine at East Carolina University. ECU Health Medical Center has achieved Magnet® designation twice and provides acute and intermediate care, rehabilitation and outpatient health services to a 29-county region that is home to more than 1.4 million people.

Position Summary

Analyzes, reports, and responds to detected cyber incidents. Maintains system cybersecurity monitoring operations. Uses cybersecurity tools to proactively search for threats to systems or networks. Conducts network defense analysis and provides recommendations for improvements. Develops and maintains thorough, up-to-date knowledge of cybersecurity threats and incident response best practices.

Defines and develops security requirements using risk assessments, threat modeling, testing, and analysis of existing systems. Plans and designs security solutions and capabilities that enable the organization to identify, protect, detect, respond, and recover from cyber threats and vulnerabilities. Designs action plans for policy creation and governance, system hardening, monitoring, incident response, disaster recovery, and emerging cybersecurity threats. Develops security integration plans to protect existing infrastructure and to incorporate future solutions. Utilizes a variety of security information and event management (SEIM), data loss prevention (DLP), intrusion prevention systems (IPS), and other tools in designs.

Identifies and tests potential information and network or internet security vulnerabilities.

Planning, implementing, managing, monitoring, and upgrading security measures for the protection of the organization's data, systems, and networks. Supports and maintains security defense architecture.

Minimum Requirements

• Bachelor's degree or equivalent work training and experience required- or higher.
• Major intermediate cyber security certification such as: CEH, CSIH, GCFA, GCIH, CAP, CISM, SSCP is required or must be obtained within one year of hire.
• 3 - 5 years' technical experience in cyber security
• 3 - 5 years' experience in a LAN / WAN environment, server engineering, security administration, or security risk analysis required.
• Experience working with project teams to design and implement new solutions
• Experience working in team-oriented, collaborative environment
• Independently motivated to seek knowledge in areas pertaining to their current position
• Self-educates and seeks knowledge from management of ECU Health, Information Services environment and ECU Health operations relevant to their position
• Must be able to read a packet capture

General Statement

It is the goal of ECU Health and its entities to employ the most qualified individual who best matches the requirements for the vacant position.

Offers of employment are subject to successful completion of all pre-employment screenings, which may include an occupational health screening, criminal record check, education, reference, and licensure verification.

We value diversity and are proud to be an equal opportunity employer. Decisions of employment are made based on business needs, job requirements and applicant's qualifications without regard to race, color, religion, gender, national origin, disability status, protected veteran status, genetic information and testing, family and medical leave, sexual orientation, gender identity or expression or any other status protected by law. We prohibit retaliation against individuals who bring forth any complaint, orally or in writing, to the employer, or against any individuals who assist or participate in the investigation of any complaint.